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ROLLING CODE SECURITY SYSTEM 

This application is a continuation, of application Sen No. 
08/446,886 filed May 17. 1995 now abandoned. 

MICROFICHE APPENDIX 

This application includes, pursuant to 37 C.RR. 1.77(c) 
(2) and 37 C.RR. 1.96(b), a naicrofiche appendix consisting 
of 1 sheet of microfiche containing 52 frames of an exem- 
plary program listing of an exemplary embodiment of the 
present invention. 

BACKGROUND OF THE INVENTION 

The invention relates in general to security systems which 
allow operation upon the receipt of a properly coded signal. 
More particularly, the invention relates to a security system 
or to a barrier operator system, such as a garage door 
operator, employing a transmitter and a receiver which 
communicate via code streams having at least a portion 
thereof which changes with multiple operation of the device. 

It is well known in the art to provide garage door 
operators or other barrier operators which include an electric 
motor connectable through a transmission to a door or other 
movable barrier which is to be opened and closed. Since 
many of these systems are associated with residences, as 
well as with garages, it is important that opening of the 
barrier be permitted only by one who is authorized to obtain 
entry to the area which the barrier protects. Some garage 
door operator systems have in the past employed mechanical 
lock and key arrangements associated with electrical 
switches mounted on the outside of the garage. While these 
systems enjoy a relatively high level of security, they are 
very inconvenient to use for a person because it necessitates 
them exiting their vehicle in order to send the command to 
open the garage door. This also may present some danger to 
people when the exit the relative security of their vehicle if 
someone may be waiting to do injury to them. 

It is also well known to provide radio-controlled garage 
door operators which include a garage door operator unit 
having a radio receiver and a motor connected to be driven 
from the radio receiver. The radio receiver is adapted to 
receive radio frequency signals or other electromagnetic 
signals having particular signal characteristics which, when 
received, cause the door to be opened. More recently, such 
transmitter and receiver systems have become relatively 
more sophisticated in that they use radio transmitters which 
employ coded transmissions of multiple or three-valued 
digits, also known as "trinary bits" or other serial coded 
transmission techniques. Among these systems are U.S. Pat. 
No. 3,906,348 to WUlmott, which employs a transmitter and 
receiver system wherein a plurality of mechanical switches 
may be used to set a stored authorization code. 

U.S. Pat. No. 4,529,980 to Liotine et al. discloses a 
transmitter and receiver combination for use in a device such 
as a garage door operator wherein the transmitter stores an 
authorization code which is to be transmitted to and received 
by the receiver via a radio frequency link. In order to alter 
or update the authorization code contained within the 
transmitter, the receiver is equipped with a programming 
signal transmitter or light emitting diode which can send a 
digitized optical signal back to the transmitter where it is 
stored. Other systems also employing encoded transmissions 
arc U.S. Pat. Nos. 4,037,201, 4^35,333, 4,638,433, 4,750, 
118 and 4,988,992. 

While each of these devices have provided good security 
for the user, it is apparent that persons wishing to commit 
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property or person-related crimes have become more sophis- 
ticated as well. It is known in the security industry today that 
devices are being made available that can intercept or steal 
rolling code. 

5 Transequatorial Technology, Inc. sells integrated circuit 
code hopping encoders identified as Keeloq Model 
NTQ105. NTQ115, NTQ125D and NTQ129. Some of the 
keeloq code hopping encoders generate serial codes having 
fixed portions, i.e., which do not change with repeated 

10 actuation of the encoding portion of the chip and rolling 
code portions which alter with each actuation of the encod- 
ing portion of the chip. In order to avoid, however, having 
the problem of the encoding portion of the chip having been 
inadvertentiy enabled and causing the rolling code to be 

15 altered on successive cnabUng attempts thereby leading to a 
rolling code which is transmitted and not recognized by a 
receiver, the keeloq code hopping encoders provide a win- 
dow forward system, that is they are operable with systems 
having code receivers which recognize as a valid code not a 

20 single rolling code, but a plurality of rolting codes within a 
certain code window or window of values which are the 
values which would be generated on a relatively small 
number of switch closures as compared to the total number 
of rolling codes available. The problem with such a system, 

25 however, might arise if a user was away for a period of time 
or had inadvertentiy caused codes to be transmitted exclud- 
ing the number of codes normally allowed within the valid 
forward code window. In that case, the rolling code would 
not be recognized by the receiver and the user could not gain 

30 entry without taking other measures to defeat the locking 
system or the garage door operator system which might 
involve the intervention of a trained engineer or technician. 

Texas Instmments also has a prior system identified as the 
Mark Star TRC1300 and TRC1315 remote control 

35 transmitter/receiver combination. The system involves the 
use of a rolling code encoder which increments or rolls 
potentially the entire code, that is it does not leave a fixed 
portion. The system also includes a forward windowing 
function which allows an authorized user to be able to cause 

^0 the receiver to be enabled within a limited number of key 
pushes. Like the keeloq system, if the forward window is 
exceeded, the Texas Instruments system must be placed in a 
learn mode to cause the system to relearn the code. In order 
to place the system into the learn mode, the person must 

45 obtain direct access to the receiver to cause a programming 
control system associated with the receiver to be hand 
actuated causing the receiver to enter a learn mode. Once the 
receiver has learned the new code, the receiver will then 
construct a new valid forward code window within which 

50 valid rolling codes may be received. The problem, of course, 
with such a system is that if, for instance in a garage door 
operator, the only portal of entry to the garage door is 
through the overhead door controlled by the garage door 
operator, the user will not be able to obtain entry to the 

55 garage without possibly having to do some damage to the 
stmcture. This problem is sometimes referred to in the 
industry as a "vaulted garage." 

What is needed is an economical encoding system which 
provides good security by using a rolling code, but which 

^0 enables a user of the system to proceed via a gradually 
degraded pathway in the event that the receiver detects a 
signal condition indicative of what might be a lack of 
security. 

g5 SUMMARY OF THE INVENTION 

The invention relates in general to an electronic system 
for providing remote security for entry of actuation of a 
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particular device. Such a system may include a transmitter event that the code is greater than the stored rolling code, 

and receiver set, for instance with a hand-held transmitter plus 1000, indicative of a relatively large number of 

and a receiver associated with a vehicle such as an automo- incrementations, the user is not locked out of the garage, but 

bile or the like. The transmitter, upon signaling the receiver, is allowed to provide further signals or indicia to the receiver 

causmg the vehicle to start up or to perform other functions. 5 that he is an authori2ed user without any significant degra- 

The system may also be useful in a barrier operator system Nation of the security. This is done by the receiver entering 

such as a garage door operator by allowing the garage door an alternate mode requiring two or more successive valid 

to be opened and closed in a relatively secure fashion while codes to be received, rather than just one. If the two or more 

preventing persons who may be intercepting the radio fre- successive valid codes are received, the garage door will 

quency signals from being able to, although unauthorized, 10 open. However, in order to prevent a person who has 

cause the vehicle to begin running or to allow access to the previously or recently recorded a recent valid code from 

- - - _ _ _ being able to obtain access to the garage, a trailing window, 

n A system includes a transmitter generally having means in this case starting at a count of 300 less than the present 
j I ^pvS ^ for developing a fixed code and a rolling or variable codcy^ stored count and including all code values between the 

rf^pt \ JThe rolling or variable .code. is. changed with each actuation^ iSx present stored count and 300 less is compared to the received 

of the transmitter.-Thc fixed code remam code. If the received code is within this backward window, 
actuation pf the^ transmitter. ' In the present system^, thev. the response of the system simply is to take no further action, 

f ^ transmitter'includes means for producing a 32-bif frame nor to provide authorization during that code cycle on the 
compji^g^heifiKediportioD-of^he co^^iCf a Second 32-bit7 assumption that the code has been purloined, 

rframe^^^ yariablb potf^W tlie code^^ 20 Thus, the present system provides important advantages 

. 31-bit_ rolling .code is^en^nairrored to provide a 32-bit j^e previous garage door operator systems and even 

mirrored rollmg aide. The 32.bit mirrored rollmg code then p^^^i^us rolling code systems. The system provides a mul- 

has Its most significant bit "deleted' by setting it to zero. Tlie ^ segmented windowed system which provides a valid 

transmitter then converts the 32.bit fixed code and the ^^^^ ^i^j^w, a second relatively insecure code window in 

mirrored variable code to a thrce-valued or tnnary bit fixed 25 which two successive valid codes must be received and 

code and a three-valued or trinary bit variable code or roUing finally a window in which no valid codes are recognized due 

to the likelihood of the receiver having been stolen. 

To provide further security, the fixed code and the rolling i* « „ki^«# «f ^ . * • *• * a 

A umA *u * 1* * ■ It is a prmcipal object of the present mvention to provide 

codes are shufQed so that alternating trinary bits are com- „ „^ j- r . 

1 r ^ J A uu J 11- J • u . . 1 ^ secunty system involvmg a radio frequency transmitter 

pnsed of a fixed code bit and a rolline code bit to Yield a total 30 j • . • 1 j ... 

f . • -ru AnV ■ '° ^uu^ uii jitiu a luiai ju receiver whercin multiple secunty conditions may exist 

of 40 tnnary biU. The 40 trinary bits are then packaged m a /f ^' 1 

c * on . - r J 1 ^rx . ' t.-.c requiring different levels of signal secunty. 

first 20-tnnary bit frame and a second 20-trmary bit frame . 

which have proceeding them a single synchronizaUon and/or ^ °^J^^' P'^^^^^ mvention to provide a 

identification pulse indicating the start of the frame and ^^^^^^^ '^^"i transmitter receiver system which may rapidly 

whether it is the first frame or the second frame. Immedi- 35 ^^^^ ^^^'^y ^^^^^^ ^ relatively large code combination, 

ately following each of the frames, the transmitter is placed O^ber advantages of the invention will become obvious to 

into a quieting condition to maintain the average power of of ordinary skill in the art upon a perusal of the 

the transmitter over a typical 100 millisecond interval within following specification and claims in light of the accompa- 

legal limits promulgated by the United States Federal Com- nyi"g drawings, 

munications Commission. The first trinary frame and the 40 

second trinary frame are used to modulate a radio frequency BRIEF DESCRIPTION OF THE DRAWINGS 

carrier, in this case via ampUtude modulation to produce an ^ ^ perspective view of an apparatus for moving 

amplitude modulated encrypted signal. In a preferred a barrier or garage embodying the present invention; 

embodiment, the radio frequency signal is amplitude modu- ™^ -. uiij- c . . r 

lated. The amplitude modulated signal is then launched and 45 ^ ^ ^ ^^""^^ ^'^f^"^ ^ transmitter for use with a 

/ may be received by an AM receiver. In the preferred parage door operator of FIG. 1; 

/ { LJ embodiment, the AM receiver receives the ampUtudc modu- ^^G. 3 is a block diagram of a receiver positioned within 

^t^o,^t,^t^^ ^^^^^ demodulates it to produce a pair of trinary bit ^ ^^^^ ^^^^ of garage door operator shown in FIG. 1; 

encoded frames. The trinary bits in each of the frames arc FIG. 4 is a schematic diagram of the transmitter shown in 

converted on the fly to 2-bit or half nibbles indicative of the 50 FIG. 2; 

values of the trinary bits which are ultimately used to form FIGS. 5A-B is a schematic diagram of the receiver shown 

two 16-bit fixed code words and two 16-bit variable code in FIG. 3; 

words. The two 16-bit fixed code words are used as a pointer flG. 6^ is a timing diagram of signals generated by a 

to idenufy the location of a previously stored rollmg code ^.^q^ transmitter: 

value within the receiver. TTie two 16 -bit rolling code words 55 ti ^ ^ ^ . - , 

are concatenated by taking the 16-bit word having the more ^ ^"Srams showing the 

significant bits, multiplying it by 310 and then adding it to ^P^^^^o" the transmitter; and 

the second of the words to produce a 32-bit encrypted rolling ^^^^ ^> E and F are flow charts showing the 
code. In order to make certain that if the transmitter was operation of the receiver. 
inadvcrtenOy actuated a number of times, the authorized 60 
user can still start his car or gain entry to his garage. The 
32-bit encrypted code is then compared via a binary sub- 
traction with the stored rolling code. If the 32-bit code is Referring now to the drawings and especially to FIG. I, 
within a window or fixed count, in the present embodiment more specifically a movable barrier door operator or garage 
1000, the microprocessor produces an authorization signal 65 door operator is generally shown therein and includes a head 
which is then responded to by other portions of the circuit to unit 12 mounted within a garage 14. More specificaUy, the 
cause the garage door to open or close as commanded. In the head imit 12 is mounted to the ceiling of the garage 14 and 
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includes a rail 18 extending therefrom with a re leasable 
trolley 20 attached having an arm 22 extending to a multiple 
paneled garage door 24 positioned for movement along a 
pair of door rails 26 and 28. The system includes a hand-held 
transmitter unit 30 adapted to send signals to an antenna 32 s 
positioned on the head unit 12 and coupled to a receiver as 
will appear hereinafter. An external control pad 34 is posi- 
tioned on the outside of the garage having a plurality of 
buttons thereon and communicate via radio frequency trans- 
mission with the antenna 32 of the head unit 12. 

An optical emitter 42 is connected via a power and signal 
line 44 to the head unit. An optical detector 46 is connected 
via a wire 48 to the head unit 12, \ 



J^f erring now to FIG. 



the transmitter"30~is^"bwri 
/thereiri-^^in-general and-includes a battery 70 connected byja 
'pustlbutton switch 72 to a power supply 74 which is coupled 
j^via leads 75 and 76 to a microcontroller 78. The microcon-^ 
* troller 78 is connected by a serial bus 79 to a non-volatile; 
I memory 80. An output bus 81 connects the microcontrollerJ 
.' to a radio frequency oscillator 82. The microcontroller 78| 
produces coded signals when the button 72 is pushed 
causing the output of the RF oscillator 82 to be amplitude 
modulated to supply a radio frequency signal at an antenna 
83 'connected thereto. More specifically, as shown in FIG. 4; 
details of the transmitter 30 arc shown therein, including a 
plurality of switches 72. When switch 72 is closed, power is 
supplied through a diode 100 to a capacitor 102 to supply a 
7,1 volt voltage at a lead 103 connected thereto. A light 
emitting diode 104 indicates that the transmitter button has 
been pushed and provides a voltage to a lead 105 connected 
thereto. A Zcner diode 106 provides voltage regulation and 
causesjhe_back,biased.diodeJ07 _tq^a}^^ the crystal 108 to 
Bfe energized, thereby energizing the miCTocbntroller"78j a y 
Zilog 125CX)I13 S-tit microcontroller in this embodiraeht. 
"■<rhe signal is also sent via a resistor 110 through a lead 111 
to a P32 pin of the microcontroller 78, Likewise, when a 
switch 113 is closed, current is fed through a diode 114 to the 
lead 103 also causing the crystal 108 to be energized, 
powering up the microcontroller at the same time that pin 
P33 of the microcontroller is pulled up. Similarly, when a 
switch 118 is closed, power is fed through a diode 119 to the 
crystal 108 as well as pull up voltage being provided through 
a resistor 120 to the pin P31, It should also be appreciated 
that pin P34 of the microcontroller is configured via a 
connection with the resistor 123 to be an RS232 input port 
124. 

The microcontroller is coupled via the serial bus 79 to a 
chip select port, a clock port and a DI port to which and from 
which serial data may be written and read and to which 
addresses may be applied. As will be seen hereinafter in the 
operation of the microcontroller, the microcontroller 78 
produces output signals at the lead 81, which are supplied to 
a resistor 125 which is coupled to a voltage dividing resistor 
126 feeding signals to the lead 127. A30-nanohenry inductor 
128 is coupled to an NPN transistor 129 at its base 130. The 
transistor 129 has a collector 131 and an emitter 132. The 
collector 131 is connected to the antenna 83 which, in this 
case, comprises a printed circuit board, loop antenna having 
an inductance of 25-nanohenries, comprising a portion of 
the tank circuit with a capacitor 133, a variable capacitor 134 
for tuning, a capacitor 135 an a capacitor 136. An 
30-nanohenry inductor 138 is coupled via a capacitor 139 to 
ground. The capacitor has a resistor 140 connected in 
parallel with it to ground. When the output from lead 81 is 
driven high by the microcontroller, the transistor Ql is 
switched on causing the tank circuit to output a signal on the 
antenna 83. When the transistor Ql is switched off, the 



output to the drive the tank circuit is extinguished causing 
the radio frequency signal at the antenna 83 also to be 

extinguished-^ ^ 

I Rj^f^g ngynow tg^EIG^^the receiyer;is sho^ thereinf?and- 
^^^^^SSt^AjK^^^^h^^^OQ ^^Mfetd>^ an^ amplitude , 
modulated receiver^2(^Sav,entfr^S^a^power supply^204 , 
connectablc to a source of alternating current 206. The,' 
receiver 202 provides a dem6dula(ecy' output via a bandpass^ 
filter 210 to an analpg-^to-digital cWvei-ter 212 which pro-' 
[Vid^s input to ^a microicontroUe;r|^i4v an internal 

read-only memory 2x6 and an^intemal random-access' 
rii<5mory 218. Aserial^nbn-yoiatilc^ is eonncctedi 

j^vii.a memoj^ bus 222;t9 the mior^^trpllet 214'to'send and I 
receive ^informition ih^teto. Viiijglmi^^ 



40 



45 



50 



65 



'chantcll' feature whith feeds electrical current on lines 230 

'\nd-232^to an electric inotdr 234. " 

Referring now to FIGS. 5A-B the antenna 200 coupled to 
a reactive divider network 250 comprised of a pair of series 
connected inductances 252 and 254 and capacitors 256 and 
258 which supply an RF signal to a buffer amplifier having 
an NPN transistor 260, at its emitter 261. The NPN transistor 
260 has a pair of capacilore 262 and 264 connected to it for 
power supply isolation. The buffer amplifier provides a 
buffered radio frequency output signal on a lead 268. The 
buffered RF signal is fed to an input 270 which forms part 
of a super-regenerative receiver 272 having an output at a 
line 274 coupled to the bandpass filter which provides digital 
output to the bandpass filter 212. The bandpass filter 212 
includes a first stage 276 and a second stage 278 to provide 
a digital level output signal at a lead 280 which is supplied 
via an averaging circuit 282 to an input pin P32 of the 
microcontroller 214. 

The microcontroller 214 may have its mode of operation 
controlled by a programming or learning switch 300 coupled 
via a line 302 to the P25 pin. A command switch 304 is 
coupled via a jumper 306 to a line 308 and ultimately 
through a resistor to the input pin P22. A pin P21 sinks 
current through a resistor 314 connected to a light emitting 
diode 316, causing the diode to light to indicate that the 
receiver is active. The microcontroller 214 has a 4 MHz 
crystal 328 connected to it to provide clock signals and 
includes an RS232 output port 332 that is coupled to the pin 
P31. A switch 340 selects whether constant pressure or 
monostable is to be selected as the output from output 
terminals P24 and P23 which are coupled to a transistor 350 
which, when switched on, sinks current through a coil 352 
of a relay 354, causing the relay to close to provide an 
actuating signal on a pair of leads 356 and 358 to an electric 
motor. 

It may be appreciated that the power supply 204 may 
receive power from an external transformer or other AC 
source through a jack 370 which is connected to a pair of RJ 
uncoupling capacitors 372 and 374. The input signal is then 
set to a full- wave rectifier bridge 376 which provides an 
output current at a resistor 378. An 18-volt Zener diode 380 
is connected between ground and the resistor 378 and 
includes high frequency bypass capacitor 382 connected in 
parallel with it. An 8.2-volt Zener diode 384 is connected in 
back-biased configuration to the resistor 378 to receive a 
signal therefrom to guarantee that at least an 8.2-volt signal 
is fed to a resistor 390 causing an LED 392 to be illuminated 
and also causing power to be supplied to a 5 -volt 78L05 
voltage regulator 396. The voltage regulator 396 supplies 
regulated voltage to an output line 398. Filtering capacitors 
400fl, 400b, 400c and 400d limit the fluctuations at the 
power supply. 
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The program code listing for the transmitter is set forth at 
pages A-1 through A- 19 and for the receiver at pages A-20 
through A-50 of the microfiche appendix. Referring now to 
FIGS. 7A through 7C, the flow chart set forth therein 
describes the operation of the transmitter. A rolling code is 5 
incremented by three in a step 500, followed by the rolling 
code being stored for the next transmission from the trans- 
mitter when the transmitter button is pushed. The order of 
the binary digits in the rolling code is inverted or mirrored 
in a step 504, following which in a step 506, the most 
significant digit is converted to zero effectively truncating 
the binary rolling code. The rolling code is then changed to 
a trinary code having values 0, 1 and 2 and the initial trinary 
rolling code is set to 0. It may be appreciated that it is trinary 
code which is actually used to modify the radio frequency ^5 
oscillator signal and the trinary code is best seen in FIG. 6. 
It may be noted that the bit timing in FIG. 6 for a 0 is 1.5 
milliseconds down time and 0.5 millisecond up time, for a 
1, 1 milhsecond down and 1 millisecond up and for a 2, 0.5 
millisecond down and 1.5 milliseconds up. The up time is 20 
actually the active time when carrier is being generated. The 
down time is inactive when the carrier is cut off. The codes 
are assembled in two frames, each of 20 trinary bits, with the 
first frame being identified by a 0.5 millisecond sync bit and 
the second frame being identified by a 1.5 millisecond sync 25 
bit. 

In a step 510, the next highest power of 3 is subtracted 
from the rolling code and a test is made in a step 512 to 
determine if the result is equal to zero. If it is, the next most 
significant digit of the binary rolling code is incremented in 30 
a step 514, following which flow is returned to the step 510. 
If the result is not greater than 0, the next highest power of 
3 is added to the rolling code in the step 51.6. In the step 518, 
another highest power of 3 is incremented and in a step 520, 
a test is determined as to whether the rolling code is 35 
completed. If it is not, control is transferred back to step 510. 
If it has, control is transferred to step 522 to clear the bit 
counter. In a step 524, the blank timer is tested to determine 
whether it is active or not. If it is not, a test Ls made in a step 
526 to determine whether the blank time has expired. If the 40 
blank time has not expired, control is transferred to a step 
528 in which the bit counter is incremented, following which 
^ control is transferred back to the decision step 524. If the 
blank time has expired as measured in decision step 526, the 
blank timer is stopped in a step 530 and the bit counter is 45 
incremented in a step 532. The bit counter is then tested for 
odd or even in a step 534. If the bit counter is not even, 
control is transferred to a step 536 where the output bit of the 
bit counter divided by 2 is fixed. If the bit counter is even, 
the output bit counter divided by 2 is rolling in a step 538. 50 
The bit counter is tested to determine whether it is set to 
equal to 80 in a step 540. If it is, the blank timer is started 
in a step 542. If it is not, the bit counter is tested for whether 
it is equal to 40 in a step 544. If it is, the blank timer is tested 
and is started in a step 544, If the bit counter is not equal to 55 
40, control is transferred back to step 522. 

Referring now to FIGS. 8A through 8F and, in particular, 
to FIG. 8 A, the operation of the receiver is set forth therein. 
In a step 700, an interrupt is detected and acted upon from 
the radio input pin. The time difference between the last edge 60 
is determined and the radio inactive timer is cleared in step 
702. A determination is made as to whether this is an active 
time or inactive time in a step 704, i.e., whether the signal 
is being sent with carrier or not. If it is an inactive time, 
indicating the absence of carrier, control is transferred to a 65 
step 706 to store the inactive time in the memory and the 
routine is exited in a step 708. In the event that it is an active 



time, the active time is stored in memory in a step 710 and 
the bit center is tested in a step 712. If the bit counter zero, 
control is transferred to a step 714, as may best be seen in 
FIG. 8B and a test is made to determine whether the inactive 
time is between 20 milliseconds and 55 milliseconds. If it is 
not, the bit counter is cleared as well as the rolling code 
register and the fixed code register in step 716 and the 
routine is exited in step 718. 

In the event that the inactive time is between 20 milU- 
seconds and 55 milliseconds, a test is made in a step 720 to 
determine whether the active time is greater than 1 
millisecond, as shown in FIG. 8C. If it is not, a test is made 
in a step 722 to determine whether the inactive time is less 
than 0.35 millisecond. If it is, a frame 1 flag is set in a step 
728 identifying the incoming information as being associ- 
ated with frame 1 and the interrupt routine is exited in a step 
730. In the event that the active time test in step 722 is not 
less than 0.35 millisecond, in the step 724, the bit counter is 
cleared as well as the rolling code register and the fixed 
register and the return is exited in the step 726, If the active 
time is greater than 1 millisecond as tested in step 720, a test 
is made in a step 732 to determine whether the active time 
is greater than 2.0 milliseconds. If it is not, the frame 2 flag 
is set in a step 734 and the routine is exited in step 730. If 
the active time is greater than 2 milliseconds, the bit counter 
rolUng code register and fixed code register arc cleared in 
step 724 and the routine is exited in step 726. 

In the event that the bit counter test in step 712 indicates 
that the bit counter is not 0, control is transferred to step 736, 
as shown in FIG. 8A. Both the active and inactive periods 
are tested to determine whether they are less than 4.5 
milliseconds. If either is not less than 4.5 milliseconds, the 
bit counter is cleared as well as the rolling code register and 
the fixed code registers. If both are equal to greater than 4.5 
milliseconds, the bit counter is incremented and the active 
time is subtracted from the inactive time in the step 738, as 
shown in FIG. 8D. In the step 740, the results of the 
subtraction are determined as to whether they are less than 
0.38 milliseconds. If they are, the bit value is set equal to 
zero in step 742 and control is transferred to a decision step 
743. If the results are not less than 0.38 milliseconds, a lest 
is made in a step 744 to determine if they difference between 
the active time and inactive time is greater than 0.38 
milliseconds and control is then transferred to a step 746 
setting the bit value equal to 2. Both of the bit values being 
set in steps 742 and 746 relate to a translation from the 
three-level trinary bits 0, 1 and 2 to a binary number. 

If the result of the step 744 is in the negative, the bit value 
is set equal to 1 in step 748. Control is then transferred to the 
step 743 to test whether the bit counter is set to an odd or an 
even number. If it is set to an odd number, control is 
transferred to a step 750 where the fixed code, indicative of 
the fact that the bit is an odd numbered bit in the frame 
sequence, rather an even numbered bit, which would imply 
that it is one of the interleaved rolling code bits, is multiplied 
by three and then the bit value added in. 

If the bit counter indicates that it is an odd number trinary 
bit being processed, the existing rolling code registers are 
multipHed by three and then the trinary bit value obtained 
from steps 742, 746 and 748 is added in. Whether step 750 
or 752 occurs, the bit counter value is the tested in the step 
754, as shown in FIG. 8E. If the bit counter value is greater 
than 21, the bit coimter rolling code register and fixed code 
register are cleared in the step 758 and the routine is exited. 
If the bit counter value is less than 21, there is a return from 
the interrupt sequence in a step 756, If the bit counter value 
is equal to 21, indicating that a sink bit plus trinary data bits 
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have been received, a lest is made in a step 760 to determine 
whether the sink bit was indicative of a first or second frame, 
if it was indicative of a first frame, the bit counter is cleared 
and set up is done for the second frame following which 
there is a return from the routine in the step 762. In the event 
that the second frame is indicated as being received by the 
decision of step 760, the two frames have their rolling 
contributions added together to form the complete inverted 
rolling code. The rolling code is then inverted or mirrored to 
recover the rolling code counter value in the step 764. A test 
is made in the step 766 to determine whether the program 
mode has been set. If it has been set, control is traasferred 
to a step 768 where the code is compared to the last code 
received. If there is no match, as would be needed in order 
to get programming, then another code will be read until two 
successive codes match or the program mode is terminated. 
In a step 770, the codes are tested such that the fixed codes 
are tested for a match with a fixed code in non-volatile 
memory. If there is a match, the rolling portion is stored in 
the memory. If there is not, it is stored in the non-volatile 
memory. Control is then transferred to step 772, the program 
indicator is switched off, the program mode is exited and 
there is a return from the interrupt. In the event that the test 
of step 766 indicates that the program mode has not been set, 
the program indicator is switched on in a step 774, as shown 
in FIG. 8F. The codes are tested to determine whether there 
is a match for the fixed portion of the code in the step 776. 
If there is no match, the program indicator is switched off 
and the routine is exited in step 778. If there is a match, the 
counter which is indicative of the roUing code is tested to 
determine whether its value is greater than the stored rolling 
code by a factor or difference of less than 3,000 indicating 
an interval of 1,000 button pushes for the transmitter. If it is 
not, a test is made in the step 786 to determine whether the 
last transmission from the same transmitter is with a rolling 
code that is two to four less than the reception and, if true, 
is the memory value minus the received rolling code counter 
value greater than 1,000. If it is, control is transferred to a 
step 782 switching off the program indicator and setting the 
operation command word causing a commanded signal to 
operate the garage door operator. The reception time out 
timer is cleared and the counter value for the rolling code is 
stored in non-volatile memory, following which the routine 
is exited in the step 784, In the event that the difference is 
not greater than 1,000, in step 786 there is an immediate 
return from the interrupt in the step 784. In the event that the 
counter test in the step 780 is positive, steps 782 and 784 are 
then executed thereafter. 

While there has been illustrated and described a particular 
embodiment of the present invention, it will be appreciated 
that numerous changes and modifications will occur to those 
skilled in the art, and it is intended in the appended claims 
to cover all those changes and modifications which fall 
within the true spirit and scope of the present invention. 

What is claimed is: 

1. A transmitter for sending an encrypted signal to control 
an actuator, comprising: 

oscillator for generating a radio frequency oscillatory 
signal; 

apparatus for enabling the sending of an encrypted signal; 

binary code generator responsive to the enabling appara- 
tus for generating a variable binary code, said variable 
code being different for each enabling by the enabhng 
device; 

trinary code generator for generating a three-valued or 
trinary code responsive to the variable binary code; and 
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transmitting apparatus for modulating the radio frequency 
oscillatory signal with the trinary code to produce a 
modulated trinary coded variable radio frequency sig- 
nal for operation or control of a secure actuator. 
5 2. A transmitter for sending an encrypted signal to control 
an actuator according to claim 1, further comprising appa- 
ratus for receiving said variable binary signal and producing 
a mirrored binary signal, said mirrored binary signal being 
supplied to said trinary code generator for generating the 
trinary signal from the variable binary signal. 

3. A transmitter for sending an encrypted signal to control 
an actuator according to claim 1, comprising apparatus for 
producing a fixed code signal and for combining said fixed 
code signal with a rolling code signal. 

4. A transmitter for sending an encrypted signal to control 
an actuator according to claim 3, comprising apparatus for 
interleaving trinary bits derived from said fixed code signal 
with trinary bits derived from said rolling code signal to 
produce a trinary interleaved fixed and rolling code signal, 

5. A transmitter for sending an encrypted signal to control 
an actuator according to claim 1, comprising incrementing 
apparatus for altering said variable code by adding a fixed 
value with each enabling apparatus actuation. 

6. A transmitter for sending an encrypted signal to control 
an actuator according to claim 5, wherein said means for 
incrementing said variable code increments said variable 
code by a prime number value. 

7. A transmitter for sending an encrypted signal to control 
an actuator according to claim 1, wherein said binary code 
generator for generating a variable binary code includes a 
non-volatile memory for storing a variable binary code. 

8. A transmitter for sending an encrypted signal to control 
an actuator according to claim 1, wherein said binary code 
generator for generating said variable code includes storage 
means holding a previous cycle variable code signal from 
which the variable code is generated. 

9. A remote security system for communicating an 
encrypted signal to a control actuator, comprising: 

binary code generator for generating a sequence of vari- 
able binary codes according to a predetermined 
algorithm, successive codes in the sequence being 
different from preceding codes in the sequence; 

trinary code generator for converting said generated vari- 
able binary code to a trinary code; 

a transmitter for modulating a transmitted radio frequency 
signal with said trinary code; 

a radio-frequency receiver for demodulating said trans- 
mitted modulated radio frequency signal and providing 
a received trinary code; 
50 trinary code convertor for converting said received trinary 
code to a received binary code; 

a controller responsive to a positive comparison of said 
received binary code and a reference variable binary 
code; and 

55 update apparatus responsive to said positive comparison 
for updating said reference variable binary code 
according to said received binary code. 

10. A remote security system according to claim 9, 
wherein said update apparatus updates said reference vari- 

60 able binary code by performing said predetermined algo- 
rithm on said reference variable binary code, 

U. A remote security system according to claim 9, 
wherein said positive comparison results if said received 
binary code and said reference variable binary code lie 
65 within a predetermined mmaerical limit of one another. 
12. A remote security system according to claim 11, 
wherein said positive comparison results if the numerical 
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difference of said received binary code minus said reference said radio-frequency receiver and separating said inter- 
variable binary code is a positive number less than said leaved fixed-and-roUing code and providing to said trinary 
predetermined limit. code convertor a received trinary fixed code and a received 

13. A remote security system according to claim 12, trinary roiling code. 

wherein said predetermined limit is about 1000. 5 20. A remote security system according to claim 19, 

14. A remote security system according to claim 12, wherein said trinary code convertor provides a received 
wherein said positive comparison results if at least two said binary fixed code in response to said received trinary fixed 
received binary codes ^ansmitted m succession, each of ^^j, , ^^^-^^^ ^^^^ 

which IS numencdlychfferent from sa^^ ^^^^.^^^ ^^jj- ^^^^^^ comprising 

binary code by a number outside the range of said prede- lO,, . - j jl c^ 

, 1, c J J addressmg apparatus for using said received binary fixed 

termined limit, represent successive results of said prede- j * jj j r • . i . . . . 

termined algorithin ^ address said reference variable binary code m a 

15. A remote security system according to claim 14, niemory. 

wherein said positive comparison results if said successively ^ ^1. A remote secunty system accondmg to claim 20, 

transmitted codes which represent successive results of said as comprising means for mirronng said binary rolling 

preselected algorithm, each yield a difference when sub- ^^^^ providing it to said trinary code generator, 

tracted from said reference variable binary code outside the ^2. A remote security system according to claim 21, 

range of zero to a second predetermined limit, further comprising apparatus for mirroring said received 

16. A remote security system according to claim 15, binary rolling code and providing it to said controller and to 
wherein said second predetermined Umit is about 300. 20 said update apparatus. 

17. A remote security system according to claim 11, 23. A remote security system according to claim 22, 
wherein the variable binary code is a rolling code and the wherein said predetermined algorithm generates a variable 
system further comprises a binary code combiner for com- binary code by adding a numeric constant to it. 

bining a binary fixed code with said binary rolling code and 24. A remote security system according to claim 23, 

providing the combination to said trinary code generator. 25 wherein said predetermined algorithm generates a variable 

18. A remote security system according to claim 17, binary code by adding the value 3 to it. 

further comprising apparatus for interleaving trinary bits 25. A remote security system according to claim 15, 

derived from said binary fixed code with trinary bits derived further comprising second update apparatus for updating 

from said binary rolling code to provide an interleaved said reference variable binary code according to one of the 

trinary fixed-and-rolling code to said transmitter. 30 set of said successively transmitted received binary codes. 

19. A remote security system according to claim 18, 

further comprising apparatus for receiving said output of * ♦ * ♦ ♦ 
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